Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/7bffd32b-afaf-37d0-9922-d8fe0bb55fe3.roa
File:                     7bffd32b-afaf-37d0-9922-d8fe0bb55fe3.roa (raw, json)
Hash identifier:          yXr46/77gXeTPy5l6/KIY4xmCpTbjBXuqmxRiIKcihU=
Subject key identifier:   43:94:A7:5A:25:B2:85:DD:CF:D3:77:0D:23:B0:A4:44:A9:E2:7D:17
Certificate issuer:       /CN=45a3fe8d-acf7-4107-b540-5163b9d101d0
Certificate serial:       010D0C9F4328584B6D2C98BA6828B72C1DFBECF0
Authority key identifier: 0E:6A:2F:F5:54:3B:E4:7E:D9:FA:E2:97:BF:DE:BF:B2:41:79:A6:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/7bffd32b-afaf-37d0-9922-d8fe0bb55fe3.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     14618
IP address blocks:        52.144.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/45a3fe8d-acf7-4107-b540-5163b9d101d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/45a3fe8d-acf7-4107-b540-5163b9d101d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:98:ba:68:28:b7:2c:1d:fb:ec:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45a3fe8d-acf7-4107-b540-5163b9d101d0
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=3c6634b3-c192-4996-9ab5-062d65965a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:bf:22:99:9e:d1:71:10:44:c7:b6:99:39:
                    5f:db:6e:b3:2c:b0:37:29:41:3a:94:76:ca:b2:1e:
                    53:76:b3:61:c8:aa:ba:34:25:e5:28:be:b2:dc:70:
                    ab:1a:47:cf:cb:be:e2:62:ff:6a:41:56:7c:e5:40:
                    d5:71:53:d8:8c:01:c6:1b:74:4c:17:ef:a1:fe:ca:
                    4d:1b:69:84:62:3b:5e:5e:bf:be:c0:d6:3d:34:0b:
                    b6:ba:28:94:96:4c:9f:dc:55:f6:ff:e9:40:f7:f3:
                    5d:ad:02:c0:b2:07:6b:20:2d:6f:e6:81:80:5f:36:
                    bc:7d:52:58:e7:43:95:9d:82:b4:89:1e:15:d5:15:
                    17:5a:f8:93:73:a0:3e:d2:f2:6f:6d:7f:24:d1:c9:
                    a1:01:b1:0c:af:97:16:5f:b8:f7:0e:28:4e:c0:f1:
                    e5:6d:e1:2a:49:16:46:d6:ec:35:33:82:b9:37:a2:
                    de:f3:92:ee:c0:7e:6c:3d:e6:a9:2c:36:6a:8e:ff:
                    ca:4c:be:27:64:86:56:a5:16:b7:35:53:14:71:96:
                    ea:12:1f:c3:4e:d0:73:4f:db:bf:63:19:c9:7e:4f:
                    6e:0c:bd:3a:3d:2a:38:43:ea:ed:d5:1a:51:f0:83:
                    99:3b:3c:fe:ea:50:78:93:7b:0f:b9:2a:1a:d4:7e:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:94:A7:5A:25:B2:85:DD:CF:D3:77:0D:23:B0:A4:44:A9:E2:7D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/7bffd32b-afaf-37d0-9922-d8fe0bb55fe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/45a3fe8d-acf7-4107-b540-5163b9d101d0.crl

            X509v3 Authority Key Identifier:
                keyid:0E:6A:2F:F5:54:3B:E4:7E:D9:FA:E2:97:BF:DE:BF:B2:41:79:A6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:23:87:11:91:4e:10:7c:e0:74:04:46:31:74:ea:7b:b2:df:
         e7:48:f1:45:e2:cf:2c:b1:4d:0b:82:77:c6:77:7d:b4:93:65:
         9b:1a:a5:ed:b3:3b:a7:5f:aa:07:1b:2a:27:3c:3b:2e:8d:b0:
         a6:66:ee:90:2d:84:d6:ad:0c:44:4a:0b:2a:90:54:d5:7a:4c:
         71:01:eb:78:1a:bd:76:04:4c:29:70:cd:bb:51:9c:c9:d5:8f:
         e2:6d:85:8b:95:e8:49:49:65:d0:dc:b9:a6:d2:8c:6b:f7:4a:
         23:d6:23:80:4e:65:7e:0a:ce:e9:97:94:48:3b:d5:97:aa:d4:
         27:7f:8a:21:55:97:a0:1f:10:78:4d:c2:c3:af:c8:ba:e4:8c:
         04:ae:69:cb:ba:62:c1:04:95:75:cc:55:51:c4:b6:6f:3a:32:
         53:20:63:8b:87:9e:8f:3b:9a:b3:0c:01:26:a2:e6:e1:a5:65:
         92:aa:d4:a6:a6:43:23:7f:09:18:31:87:c2:8a:ef:c1:dc:44:
         cd:40:64:2f:76:15:57:98:8f:32:5a:96:6a:90:3f:e9:41:a6:
         ba:c3:99:be:cb:19:8e:fa:2d:c6:0b:3b:a3:89:ce:19:b1:c2:
         a5:25:59:b5:1a:d0:f7:87:52:d2:0e:05:68:a7:c5:1f:3d:3b:
         2f:1c:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:23:01 2025 by rpki-client